2 matches found
CVE-2006-5532
CVE-2006-5532 affects RMSOFT Gallery System 2.0, specifically the Images.PHP handler (rmgs/images.php). The vulnerability arises from insufficient sanitization of user-supplied input in the kw parameter, enabling a cross-site scripting (XSS) payload to execute in the victim’s browser. The issue i...
CVE-2008-1064
The CVE-2008-1064 entry concerns the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS, specifically in images.php where a Cross-site scripting (XSS) vulnerability exists. The underlying issue is an ability to inject arbitrary web script or HTML via the q parameter, enabling a...